Aikido

Update the access token used for code scanning.

Get the workspace container AutoFix PR creation settings. Container selection is returned as containers_scope (“all” or…

Get the workspace dependency AutoFix PR creation settings. Repository selection is returned as repos_scope (“all” or “se…

Get the workspace Pentest & AI Code Analysis AutoFix PR creation settings. Repository selection is returned as repos_sco…

Get the workspace SAST & IaC AutoFix PR creation settings. Repository selection is returned as repos_scope (“all” or “se…

Returns a paginated list of Aikido images in your account.

Returns a paginated list of autofix tasks in your account. Use the result’s next field for pagination.

Returns the issues that an autofix task was trying to solve. Use the autofix task ID (the id field) from the /autofix/…

Returns the list of hardened image requests that have been submitted for your account, including their current status.

Request that a specific image tag be secured. The request is recorded and does not trigger an immediate rebuild.

Update the workspace container AutoFix PR creation settings. PRs are created and re-evaluated every day.

Update the workspace dependency AutoFix PR creation settings. PRs are created and re-evaluated every day. Use severity_f…

Update the workspace Pentest & AI Code Analysis AutoFix PR creation settings. PRs are created and re-evaluated every day…

Update the workspace SAST & IaC AutoFix PR creation settings. PRs are created and re-evaluated every day. Use severity_f…

Adds an internal resource URL that a broker app can access. Only base URLs are allowed, without a path (for example http…

Removes a resource URL from a broker app

Returns a list of all broker apps in your account, including their mapped resource URLs.

Validates a new bug bounty report for a given program.

Connect a new AWS cloud environment

Connect a new Azure cloud environment. https://help.aikido.dev/doc/get-required-values—set-up-configuration-to-connect-…

Connect a new Gcp cloud environment. https://help.aikido.dev/cloud-scanning/connect-your-cloud/gcp/get-required-values-+…

Connect your Kubernetes cluster to Aikido. This will register a cluster and return the agent token needed for installati…

Returns cloud assets for the connected clouds in your account. Supports pagination, filtering and search parameters simi…

Returns a list of all the active clouds connected in your account

Removes a cloud with a specified id

Update the credentials for an Azure cloud

Returns the latest code coverage summary for a repository. Optionally filter by branch name. When no branch is provided,…

Returns a paginated list of repositories that have code coverage results. Optionally filter by branch name. When no bran…

Ignores an open code quality finding. Use the finding id returned by the repo-findings list endpoint.

Returns a list of code quality findings for a specific pull request. Only the findings from the latest scan are returned…

Returns a paginated list of code quality findings for a repository. Findings represent repository state across full-repo…

Returns the CIS AWS compliance overview in JSON format. This endpoint is available on all paid plans.

Returns the CIS compliance overview in JSON format. This endpoint is available on all paid plans.

Returns the DORA compliance overview in JSON format. This endpoint is available on all paid plans.

Returns the ‘Domains & API - FedRAMP report’ as an OSCAL v1.1.2 assessment-results (SAR) document, covering all domains…

Returns the GDPR compliance overview in JSON format. This endpoint is available on all paid plans.

Returns the ISO compliance overview in JSON format. This endpoint is available on all paid plans.

Returns the NIS2 compliance overview in JSON format. This endpoint is available on all paid plans.

Returns the PCI compliance overview in JSON format. This endpoint is available on all paid plans.

Returns the SOC2 compliance overview in JSON format. This endpoint is available on all paid plans.

Activate container

Add Azure container registry to Aikido to scan

Add a label to a container repository

Add GCP Artifact Registry to Aikido to scan

Add a GitLab Self-Managed (self-hosted) container registry to Aikido to scan

Add public container image to Aikido to scan, such as nginx:latest

Clone container with a specific tag filter

Deactivate container

Delete public or self-reported SBOM container

Returns an overview of all packages & licenses found in a container

Returns the latest uploaded SBOM of a container with all metadata collected.

Returns an SBOM of all packages & licenses found in specified containers

Returns the requested container registry

Returns the requested container repository

Link code repository to container

Returns a list of places where a container image runs, such as AWS lambdas, AWS ECS, Azure Jobs, Kubernetes pods,..

Returns a list of all the active container repositories in your account

Remove a label from a container repository

Scan a container

Unlink code repository from container

Update container connectivity status

Update a label for a container repository

Update container sensitivity

Update the tag filter used for the container scanning

Upload a self-generated SBOM

Create a new custom semgrep rule

Edit a custom semgrep rule

Get a custom semgrep rule

List custom semgrep rules

Remove a custom semgrep rule

Add a subdomain to a attack surface domain

Create a new domain

List leaked credentials (data leaks) found for an attack surface domain

Returns a list of all the active domains connected in your account

List all the subdomains for a attack surface domain

Removes a domain with a specified id

Removes a subdomain from a attack surface domain

Start scan for a domain

Update Authentication Headers for a Domain

Update Custom Scan Headers for a Domain

Updates the OpenAPI spec of a domain with a specified id

Sets how often Aikido scans a domain.

Adds an exception to the endpoint protection settings

Returns a paginated list of endpoint protection activity log items

Returns a list of all the endpoint protection devices

Returns a list of all the endpoint protection exceptions

Returns a list of all the installed packages

Returns a list of all the endpoint protection permission groups

Removes a device from endpoint protection

Removes an exception from the endpoint protection settings

Add note to issue group

Adjust severity of an issue group to ‘critical’, ‘high’, ‘medium’ or ‘low’

Adjust severity of a single issue to ‘critical’, ‘high’, ‘medium’ or ‘low’

Returns a list of all issues (open, ignored, snoozed, closed,..) in your account in JSON or CSV format

Returns the details of a single issue

Returns the total number of open issues

Returns the CVE exploitability analysis results for a single issue

Returns the CVE exploitability analysis results for multiple issues

Returns the details of multiple issues. This feature needs to be enabled by Aikido support before it can be used.

Returns the details of an issue group

Returns the reachability of a single issue

Ignore an issue

Ignore an issue group

List notes for an issue group

Returns a list of all the open issue groups in your account, as seen in the feed. Use the result’s next field for pagina…

Snooze an issue for a given period

Snooze an issue group for a given period

Solve an issue

Unignore an issue

Unignore an issue group

Unsnooze an issue for a given period

Unsnooze an issue group

Returns a list of licenses

Mark licenses for a package as internally developed. Aikido will no longer show these licenses as a risk.

Overwrite License For Package

Returns information about the latest local scanner

Create a new draft pentest assessment. The project will be created if it doesn’t exist. You can either provide existing…

Get attack analysis for a specific pentest issue

Get detailed information about a specific pentest assessment including status, progress, and issue count

Returns all AI Code Analysis (code audit) assessments in your account, newest first.

Returns all pentest assessments in your account, newest first. Draft assessments are not included.

Returns the details and results of a PR check.

Returns the workspace default PR Checks configuration. This configuration is applied to newly activated repositories tha…

Returns all manual ignores or snoozes actions taken on issues flagged in PRs

Returns PR checks

Returns a paginated list of all the CI checks configurations in your account

Create or update the workspace default PR Checks configuration. This configuration is applied to newly activated reposit…

Configure PR Checks

Configure PR Checks for all active repositories in the account. Currently only supports GitHub.

Returns a report as a pdf

Returns the activity log items

List cloud rules. Requires scope clouds:read

List IaC rules. Requires scope repositories:read

List Mobile rules. Requires scope repositories:read

List SAST rules. Requires scope repositories:read

Add an exclude path to a code repo

Add a label to a code repository

Add or update your private package registry connection, such as a private NPM or Maven package registry.

Clone code repo for multi branch scanning

Deactivate code repo

Delete code repo. Only supported for selfscanned or cloned repositories.

Returns an overview of all packages & licenses found in a code repository

Only available for Scale plan workspaces! Returns an overview of all packages & licenses found in code repositories link…

Returns the details of a code repository

Triggers a code repositories sync with your Git provider

Returns a list of all the active code repositories in your account

Remove an exclude path from a code repo

Remove a label from a code repository

Scan a code repository

Add or update environment variables, including Gradle private registry variables such as ORG_GRADLE_PROJECT_*. An enviro…

Update code repository connectivity

Update code repository dev dependency scanning

Update a label for a code repository

Update code repository sensitivity

Returns a paginated list of user requests in your account.

Reviews a user request

Get changelog summary for package

Get details about a CVE

Returns a health score and summary for each requested package version that has been scored. Packages must use the name@v…

Returns the CWE class and description for every CWE Aikido tracks.

Returns the global end-of-life catalog for runtimes, frameworks, and operating systems. This is reference data, not the…

Get malware packages

Get project mapping

Link existing task to issue group

Returns the tasks related to an issue group

List task tracking integrations

List tasks live from the integrated task tracker

List task tracking projects

Map code repo to task tracking projects. Make sure the mapping mode is set to ‘repos’ in the task tracker settings.

Map teams to task tracking projects. Make sure the mapping mode is set to ‘teams’ in the task tracker settings.

Add user to team

Create a new team

Delete a non-imported team

Link resource to team

Returns a list of all the teams in your account

Remove user from team

Unlink resource from team

Update an existing team

Update the path limitations for a repository that is already linked to a team. This works for both manually created and…

Disable (remove from the workspace) the specified user

Returns the specified user details

Returns a list of all the users that have an active IDE token

Returns unused user invites that have not been accepted yet. Includes email invites and shareable link invites.

Returns a paginated list of user login events in your workspace, newest first.

Returns a list of all the users

Update the specified user rights

Returns a SBOM of a virtual machine

Returns a list of all the virtual machines in your account

Add webhook

List webhooks

Remove webhook

Returns the SLA settings for the workspace

Returns the current credit balance of the workspace’s wallet

Returns the configuration errors of the workspace

Returns information about the workspace of the client

Create a new Zen app

Delete a Zen app

Get a Zen app

Get the bot lists configuration for an app

Get the country-based IP blocking configuration for an app

Get a Zen event

Get the IP lists configuration for an app including known threat actors and Tor settings

List the users for a Zen app

List Zen apps

Creates a new token and revokes the current token if it exists for a Zen app

Update an existing Zen app

Enable or disable blocking mode for a Zen app

Update the bot lists configuration for an app

Update the country-based IP blocking configuration for an app

Set the custom IP blocklist for an app. This will replace the existing blocklist with the new one.

Update the IP lists configuration for an app including known threat actors and Tor settings. This endpoint supports part…

Update blocking status of a user